@kensio/yulin 1.9.0 → 1.10.0

package/dist/service/sns/command/topic/topic.command.d.ts

@@ -0,0 +1,95 @@
+import type { SimResponseMetadata } from "../../../aws/metadata/response-metadata.type.js";
+import type { SimSnsTopicAttributeInput } from "../../topic/sim-sns-topic-attributes.js";
+/**
+ * One topic in a ListTopics response, which carries the ARN and nothing else.
+ */
+export interface SimSnsListedTopic {
+    readonly TopicArn: string;
+}
+/**
+ * Minimal structural sim SNS CreateTopic command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/CreateTopicCommand/
+ */
+export interface SimCreateTopicCommand {
+    readonly input: SimCreateTopicCommandInput;
+}
+export interface SimCreateTopicCommandInput {
+    readonly Name?: string | undefined;
+    readonly Attributes?: SimSnsTopicAttributeInput | undefined;
+    readonly Tags?: readonly SimSnsTag[] | undefined;
+    readonly DataProtectionPolicy?: string | undefined;
+}
+/**
+ * One tag as a CreateTopic request carries it.
+ */
+export interface SimSnsTag {
+    readonly Key?: string | undefined;
+    readonly Value?: string | undefined;
+}
+export interface SimCreateTopicCommandOutput {
+    readonly TopicArn?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS DeleteTopic command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/DeleteTopicCommand/
+ */
+export interface SimDeleteTopicCommand {
+    readonly input: SimDeleteTopicCommandInput;
+}
+export interface SimDeleteTopicCommandInput {
+    readonly TopicArn?: string | undefined;
+}
+export interface SimDeleteTopicCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS ListTopics command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/ListTopicsCommand/
+ */
+export interface SimListTopicsCommand {
+    readonly input: SimListTopicsCommandInput;
+}
+export interface SimListTopicsCommandInput {
+    readonly NextToken?: string | undefined;
+}
+export interface SimListTopicsCommandOutput {
+    readonly Topics?: readonly SimSnsListedTopic[] | undefined;
+    readonly NextToken?: string | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS GetTopicAttributes command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/GetTopicAttributesCommand/
+ */
+export interface SimGetTopicAttributesCommand {
+    readonly input: SimGetTopicAttributesCommandInput;
+}
+export interface SimGetTopicAttributesCommandInput {
+    readonly TopicArn?: string | undefined;
+}
+export interface SimGetTopicAttributesCommandOutput {
+    readonly Attributes?: Record<string, string> | undefined;
+    readonly $metadata: SimResponseMetadata;
+}
+/**
+ * Minimal structural sim SNS SetTopicAttributes command.
+ *
+ * https://docs.aws.amazon.com/AWSJavaScriptSDK/v3/latest/client/sns/command/SetTopicAttributesCommand/
+ */
+export interface SimSetTopicAttributesCommand {
+    readonly input: SimSetTopicAttributesCommandInput;
+}
+export interface SimSetTopicAttributesCommandInput {
+    readonly TopicArn?: string | undefined;
+    readonly AttributeName?: string | undefined;
+    readonly AttributeValue?: string | undefined;
+}
+export interface SimSetTopicAttributesCommandOutput {
+    readonly $metadata: SimResponseMetadata;
+}
+//# sourceMappingURL=topic.command.d.ts.map

package/dist/service/sns/command/topic/topic.command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic.command.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/topic.command.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,iDAAiD,CAAC;AAC3F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,yCAAyC,CAAC;AAEzF;;GAEG;AACH,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,yBAAyB,GAAG,SAAS,CAAC;IAC5D,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,SAAS,EAAE,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACpD;AAED;;GAEG;AACH,MAAM,WAAW,SAAS;IACxB,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACrC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,0BAA0B,CAAC;CAC5C;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;CAC3C;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACzC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,iBAAiB,EAAE,GAAG,SAAS,CAAC;IAC3D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACxC,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IACzD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,KAAK,EAAE,iCAAiC,CAAC;CACnD;AAED,MAAM,WAAW,iCAAiC;IAChD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5C,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC9C;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,SAAS,EAAE,mBAAmB,CAAC;CACzC"}

package/dist/service/sns/command/topic/topic.command.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=topic.command.js.map

package/dist/service/sns/command/topic/topic.command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"topic.command.js","sourceRoot":"","sources":["../../../../../src/service/sns/command/topic/topic.command.ts"],"names":[],"mappings":""}

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.d.ts

@@ -0,0 +1,27 @@
+import type { SimAws } from "../../../aws/sim-aws.js";
+import type { SimSnsDeliveryEndpoints, SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+interface SimAwsSnsDeliveryFunctionsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as places a
+ * topic delivers to.
+ *
+ * The function is looked up when a message is delivered, never when this is
+ * built, for the same reason the delivery queues do it that way: reaching
+ * another service while this one is being constructed is a cycle with no bottom
+ * to it.
+ *
+ * A function in another Account or another Region is allowed, since real SNS
+ * invokes both.
+ */
+export declare class SimAwsSnsDeliveryFunctions implements SimSnsDeliveryEndpoints {
+    private readonly simAws;
+    constructor(properties: SimAwsSnsDeliveryFunctionsProperties);
+    /**
+     * Deliver one message to the function its subscription's endpoint names.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-aws-sns-delivery-functions.d.ts.map

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-functions.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,yBAAyB,CAAC;AAEtD,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wBAAwB,CAAC;AAGhC,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;;;;;;GAWG;AACH,qBAAa,0BAA2B,YAAW,uBAAuB;IACxE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAEhC,YAAY,UAAU,EAAE,oCAAoC,EAE3D;IAED;;OAEG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAS3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.js

@@ -0,0 +1,31 @@
+import { SimSnsFunctionEndpointArn } from "../../subscription/sim-sns-function-endpoint-arn.js";
+import { SimSnsDeliveryFunction } from "./sim-sns-delivery-function.js";
+/**
+ * The simulated Lambda functions of one simulated AWS instance, as places a
+ * topic delivers to.
+ *
+ * The function is looked up when a message is delivered, never when this is
+ * built, for the same reason the delivery queues do it that way: reaching
+ * another service while this one is being constructed is a cycle with no bottom
+ * to it.
+ *
+ * A function in another Account or another Region is allowed, since real SNS
+ * invokes both.
+ */
+export class SimAwsSnsDeliveryFunctions {
+    simAws;
+    constructor(properties) {
+        this.simAws = properties.simAws;
+    }
+    /**
+     * Deliver one message to the function its subscription's endpoint names.
+     */
+    async deliver(request) {
+        const arn = SimSnsFunctionEndpointArn.parse(request.subscription.endpoint.value);
+        await new SimSnsDeliveryFunction({
+            arn,
+            scope: this.simAws.accountRegionScope(arn.accountId, arn.regionName),
+        }).deliver(request);
+    }
+}
+//# sourceMappingURL=sim-aws-sns-delivery-functions.js.map

package/dist/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-functions.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-aws-sns-delivery-functions.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AAKhG,OAAO,EAAE,sBAAsB,EAAE,MAAM,gCAAgC,CAAC;AAMxE;;;;;;;;;;;GAWG;AACH,MAAM,OAAO,0BAA0B;IACpB,MAAM,CAAS;IAEhC,YAAY,UAAgD;QAC1D,IAAI,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAClC,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,GAAG,GAAG,yBAAyB,CAAC,KAAK,CACzC,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CACpC,CAAC;QAEF,MAAM,IAAI,sBAAsB,CAAC;YAC/B,GAAG;YACH,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,kBAAkB,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC;SACrE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtB,CAAC;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts

@@ -0,0 +1,31 @@
+import type { SimAwsAccountRegionContainer } from "../../../aws/sim-aws-account-region-scope.js";
+import type { SimSnsFunctionEndpointArn } from "../../subscription/sim-sns-function-endpoint-arn.js";
+import { type SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+interface SimSnsDeliveryFunctionProperties {
+    readonly arn: SimSnsFunctionEndpointArn;
+    readonly scope: SimAwsAccountRegionContainer;
+}
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export declare class SimSnsDeliveryFunction {
+    private readonly arn;
+    private readonly scope;
+    constructor(properties: SimSnsDeliveryFunctionProperties);
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    deliver(request: SimSnsDeliveryRequest): Promise<void>;
+}
+export {};
+//# sourceMappingURL=sim-sns-delivery-function.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,8CAA8C,CAAC;AAIjG,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,qDAAqD,CAAC;AACrG,OAAO,EACL,KAAK,qBAAqB,EAG3B,MAAM,wBAAwB,CAAC;AAGhC,UAAU,gCAAgC;IACxC,QAAQ,CAAC,GAAG,EAAE,yBAAyB,CAAC;IACxC,QAAQ,CAAC,KAAK,EAAE,4BAA4B,CAAC;CAC9C;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA4B;IAChD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+B;IAErD,YAAY,UAAU,EAAE,gCAAgC,EAGvD;IAED;;;;;;;OAOG;IACG,OAAO,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC,CAuC3D;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js

@@ -0,0 +1,62 @@
+import { SimLambdaServiceInvokeAuthorizer } from "../../../lambda/command/authorize/sim-lambda-service-invoke-authorizer.js";
+import { SimSnsDeliveryNotPermitted } from "../../error/sim-sns-delivery.error.js";
+import { SimSnsNotFoundException } from "../../error/sim-sns.error.js";
+import { simSnsDeliverySource, simSnsServicePrincipal, } from "../sim-sns-delivery.js";
+import { simSnsLambdaEventDocument } from "./sim-sns-lambda-event.js";
+/**
+ * One function a simulated topic is delivering to, in the Account and Region
+ * its ARN names.
+ *
+ * Everything is asked of the function's own Account, which is what makes a
+ * function in another Account reachable: its resource policy is the grant, and
+ * its Account's IAM is what evaluates it.
+ */
+export class SimSnsDeliveryFunction {
+    arn;
+    scope;
+    constructor(properties) {
+        this.arn = properties.arn;
+        this.scope = properties.scope;
+    }
+    /**
+     * Invoke the function with the event, if it still admits SNS for this topic.
+     *
+     * The resource policy is consulted on every delivery rather than remembered
+     * from the moment the subscription was made, so a permission taken away
+     * afterwards stops delivery. Real SNS does not check it at `Subscribe` time
+     * at all, which is why this is the only place it is asked.
+     */
+    async deliver(request) {
+        const source = simSnsDeliverySource(request);
+        const endpointArn = request.subscription.endpoint.value;
+        const simFunction = this.scope
+            .lambda()
+            .getSimFunctionByName(this.arn.functionName);
+        if (simFunction === undefined) {
+            // Not a refusal: the resource policy said nothing, because there is no
+            // function. A subscription pointing at nothing is a mistake worth
+            // warning about, where a policy saying no is a modelled outcome a test
+            // may be asking for on purpose.
+            throw new SimSnsNotFoundException(`${endpointArn} is not a simulated Lambda function.`);
+        }
+        const decision = new SimLambdaServiceInvokeAuthorizer({
+            iam: this.scope.iam(),
+        }).authorize({
+            simFunction,
+            servicePrincipal: simSnsServicePrincipal,
+            ...source,
+        });
+        if (decision.isDenied) {
+            throw new SimSnsDeliveryNotPermitted(`The resource policy of ${endpointArn} does not allow ` +
+                `${simSnsServicePrincipal} to invoke it for ${source.sourceArn}. ` +
+                "Grant it with AddPermission.");
+        }
+        // The function is invoked directly rather than through an Invoke command,
+        // because SNS is already inside the background task that stands for the
+        // asynchronous invocation real SNS makes, and because a handler failure
+        // has to reach the delivery outcome rather than being swallowed as an
+        // asynchronous invocation error.
+        await simFunction.invoke(simSnsLambdaEventDocument(request));
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-function.js.map

package/dist/service/sns/delivery/lambda/sim-sns-delivery-function.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-function.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-delivery-function.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,gCAAgC,EAAE,MAAM,2EAA2E,CAAC;AAC7H,OAAO,EAAE,0BAA0B,EAAE,MAAM,uCAAuC,CAAC;AACnF,OAAO,EAAE,uBAAuB,EAAE,MAAM,8BAA8B,CAAC;AAEvE,OAAO,EAEL,oBAAoB,EACpB,sBAAsB,GACvB,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAE,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAOtE;;;;;;;GAOG;AACH,MAAM,OAAO,sBAAsB;IAChB,GAAG,CAA4B;IAC/B,KAAK,CAA+B;IAErD,YAAY,UAA4C;QACtD,IAAI,CAAC,GAAG,GAAG,UAAU,CAAC,GAAG,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,OAA8B;QAC1C,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC;QACxD,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK;aAC3B,MAAM,EAAE;aACR,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAE/C,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;YAC9B,uEAAuE;YACvE,kEAAkE;YAClE,uEAAuE;YACvE,gCAAgC;YAChC,MAAM,IAAI,uBAAuB,CAC/B,GAAG,WAAW,sCAAsC,CACrD,CAAC;QACJ,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,gCAAgC,CAAC;YACpD,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE;SACtB,CAAC,CAAC,SAAS,CAAC;YACX,WAAW;YACX,gBAAgB,EAAE,sBAAsB;YACxC,GAAG,MAAM;SACV,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;YACtB,MAAM,IAAI,0BAA0B,CAClC,0BAA0B,WAAW,kBAAkB;gBACrD,GAAG,sBAAsB,qBAAqB,MAAM,CAAC,SAAS,IAAI;gBAClE,8BAA8B,CACjC,CAAC;QACJ,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,wEAAwE;QACxE,sEAAsE;QACtE,iCAAiC;QACjC,MAAM,WAAW,CAAC,MAAM,CAAC,yBAAyB,CAAC,OAAO,CAAC,CAAC,CAAC;IAC/D,CAAC;CACF"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts

@@ -0,0 +1,10 @@
+import type { SimSnsDeliveryRequest } from "../sim-sns-delivery.js";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export declare function simSnsLambdaEventDocument(request: SimSnsDeliveryRequest): object;
+//# sourceMappingURL=sim-sns-lambda-event.d.ts.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.d.ts","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,wBAAwB,CAAC;AAcpE;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,qBAAqB,GAC7B,MAAM,CAWR"}

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js

@@ -0,0 +1,53 @@
+/**
+ * What the `EventSource` of an SNS record says, which is how a handler taking
+ * events from more than one service tells them apart.
+ */
+const eventSource = "aws:sns";
+/**
+ * The version of the SNS record shape, which real SNS has never moved off.
+ */
+const eventVersion = "1.0";
+/**
+ * The event one subscribed Lambda function is invoked with.
+ *
+ * `Records` always holds exactly one entry, even for a `PublishBatch`. Real SNS
+ * does not batch to Lambda: each published message is its own asynchronous
+ * invocation, so a handler looping over `Records` sees one message per call.
+ */
+export function simSnsLambdaEventDocument(request) {
+    return {
+        Records: [
+            {
+                EventSource: eventSource,
+                EventVersion: eventVersion,
+                EventSubscriptionArn: request.subscription.arn.value,
+                Sns: snsRecord(request.notification.fields()),
+            },
+        ],
+    };
+}
+/**
+ * The notification as the `Sns` object of a record spells it.
+ *
+ * Two fields differ from the envelope a queue receives, and the difference is
+ * real SNS behaviour rather than an oversight: the envelope has `SigningCertURL`
+ * and `UnsubscribeURL`, and a Lambda event has `SigningCertUrl` and
+ * `UnsubscribeUrl`. `Subject` and `MessageAttributes` are always present here,
+ * where the envelope leaves each out when there is nothing to put in it.
+ */
+function snsRecord(fields) {
+    return {
+        Type: fields.type,
+        MessageId: fields.messageId,
+        TopicArn: fields.topicArn,
+        Subject: fields.subject ?? null,
+        Message: fields.message,
+        Timestamp: fields.timestamp,
+        SignatureVersion: fields.signature.SignatureVersion,
+        Signature: fields.signature.Signature,
+        SigningCertUrl: fields.signature.SigningCertURL,
+        UnsubscribeUrl: fields.unsubscribeUrl,
+        MessageAttributes: fields.messageAttributes,
+    };
+}
+//# sourceMappingURL=sim-sns-lambda-event.js.map

package/dist/service/sns/delivery/lambda/sim-sns-lambda-event.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-lambda-event.js","sourceRoot":"","sources":["../../../../../src/service/sns/delivery/lambda/sim-sns-lambda-event.ts"],"names":[],"mappings":"AAGA;;;GAGG;AACH,MAAM,WAAW,GAAG,SAAS,CAAC;AAE9B;;GAEG;AACH,MAAM,YAAY,GAAG,KAAK,CAAC;AAE3B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA8B;IAE9B,OAAO;QACL,OAAO,EAAE;YACP;gBACE,WAAW,EAAE,WAAW;gBACxB,YAAY,EAAE,YAAY;gBAC1B,oBAAoB,EAAE,OAAO,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK;gBACpD,GAAG,EAAE,SAAS,CAAC,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC;aAC9C;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,SAAS,CAAC,MAAgC;IACjD,OAAO;QACL,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,IAAI;QAC/B,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,gBAAgB,EAAE,MAAM,CAAC,SAAS,CAAC,gBAAgB;QACnD,SAAS,EAAE,MAAM,CAAC,SAAS,CAAC,SAAS;QACrC,cAAc,EAAE,MAAM,CAAC,SAAS,CAAC,cAAc;QAC/C,cAAc,EAAE,MAAM,CAAC,cAAc;QACrC,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;KAC5C,CAAC;AACJ,CAAC"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts

@@ -0,0 +1,17 @@
+import type { SimAws } from "../../aws/sim-aws.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+interface SimAwsSnsDeliveryEndpointsProperties {
+    readonly simAws: SimAws;
+}
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export declare class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties: SimAwsSnsDeliveryEndpointsProperties);
+}
+export {};
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.d.ts.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,sBAAsB,CAAC;AAEnD,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAG3F,UAAU,oCAAoC;IAC5C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAED;;;;;;GAMG;AACH,qBAAa,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAU,EAAE,oCAAoC,EAO3D;CACF"}

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js

@@ -0,0 +1,21 @@
+import { SimAwsSnsDeliveryFunctions } from "./lambda/sim-aws-sns-delivery-functions.js";
+import { SimSnsProtocolDeliveryEndpoints } from "./sim-sns-protocol-delivery-endpoints.js";
+import { SimAwsSnsDeliveryQueues } from "./sqs/sim-aws-sns-delivery-queues.js";
+/**
+ * Everywhere the topics of one simulated AWS instance can deliver.
+ *
+ * Which protocols are simulated is a fact about simulated SNS rather than about
+ * the service builder that hands it its endpoints, so the set is assembled
+ * here.
+ */
+export class SimAwsSnsDeliveryEndpoints extends SimSnsProtocolDeliveryEndpoints {
+    constructor(properties) {
+        super({
+            byProtocol: {
+                sqs: new SimAwsSnsDeliveryQueues(properties),
+                lambda: new SimAwsSnsDeliveryFunctions(properties),
+            },
+        });
+    }
+}
+//# sourceMappingURL=sim-aws-sns-delivery-endpoints.js.map

package/dist/service/sns/delivery/sim-aws-sns-delivery-endpoints.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-aws-sns-delivery-endpoints.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-aws-sns-delivery-endpoints.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,0BAA0B,EAAE,MAAM,4CAA4C,CAAC;AACxF,OAAO,EAAE,+BAA+B,EAAE,MAAM,0CAA0C,CAAC;AAC3F,OAAO,EAAE,uBAAuB,EAAE,MAAM,sCAAsC,CAAC;AAM/E;;;;;;GAMG;AACH,MAAM,OAAO,0BAA2B,SAAQ,+BAA+B;IAC7E,YAAY,UAAgD;QAC1D,KAAK,CAAC;YACJ,UAAU,EAAE;gBACV,GAAG,EAAE,IAAI,uBAAuB,CAAC,UAAU,CAAC;gBAC5C,MAAM,EAAE,IAAI,0BAA0B,CAAC,UAAU,CAAC;aACnD;SACF,CAAC,CAAC;IACL,CAAC;CACF"}

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts

@@ -0,0 +1,32 @@
+/**
+ * The values real SNS signs, under the names it signs them by.
+ *
+ * A verifier rebuilds this from the document it received, so the names are the
+ * document's rather than the simulator's.
+ */
+export interface SimSnsSignedValues {
+    readonly Message: string;
+    readonly MessageId: string;
+    readonly Subject: string | undefined;
+    readonly Timestamp: string;
+    readonly TopicArn: string;
+    readonly Type: string;
+}
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export declare function simSnsCanonicalMessage(values: SimSnsSignedValues): string;
+//# sourceMappingURL=sim-sns-canonical-message.d.ts.map

package/dist/service/sns/delivery/sim-sns-canonical-message.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAMzE"}

package/dist/service/sns/delivery/sim-sns-canonical-message.js

@@ -0,0 +1,24 @@
+/**
+ * The string real SNS signs, which is what a verifier rebuilds to check the
+ * signature.
+ *
+ * Each signed field is its name and its value, both followed by a newline, in
+ * the alphabetical order of the names. The names are sorted here rather than
+ * taken in the order they were passed in: an object keeps the order its keys
+ * were written in, so a caller writing the same fields in another order would
+ * otherwise produce a string no verifier could rebuild.
+ *
+ * A field with no value is left out rather than signed as an empty string,
+ * which is what makes a message published without a subject verify.
+ *
+ * The message attributes are not signed, here or on real AWS, so changing one
+ * in flight leaves the signature valid.
+ */
+export function simSnsCanonicalMessage(values) {
+    return Object.entries(values)
+        .filter(([, value]) => value !== undefined)
+        .toSorted(([left], [right]) => left.localeCompare(right))
+        .map(([name, value]) => `${name}\n${String(value)}\n`)
+        .join("");
+}
+//# sourceMappingURL=sim-sns-canonical-message.js.map

package/dist/service/sns/delivery/sim-sns-canonical-message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-canonical-message.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-canonical-message.ts"],"names":[],"mappings":"AAeA;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAA0B;IAC/D,OAAO,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC;SAC1B,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,CAAC;SAC1C,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SACxD,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,GAAG,IAAI,KAAK,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;SACrD,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC"}

package/dist/service/sns/delivery/sim-sns-delivery-failures.d.ts

@@ -0,0 +1,60 @@
+/**
+ * What a delivery that failed was trying to do.
+ */
+export interface SimSnsDeliveryFailureProperties {
+    readonly topicArn: string;
+    readonly subscriptionArn: string;
+    readonly endpointArn: string;
+    readonly messageId: string;
+    readonly error: unknown;
+}
+/**
+ * One message an endpoint did not take.
+ */
+export declare class SimSnsDeliveryFailure {
+    readonly topicArn: string;
+    readonly subscriptionArn: string;
+    readonly endpointArn: string;
+    readonly messageId: string;
+    readonly error: unknown;
+    constructor(properties: SimSnsDeliveryFailureProperties);
+    /**
+     * Whether the endpoint refused the message rather than failing on it.
+     */
+    get wasRefused(): boolean;
+    /**
+     * What went wrong, in one line.
+     */
+    get reason(): string;
+}
+/**
+ * What became of the messages a simulated SNS scope could not deliver.
+ *
+ * Real SNS tells the publisher nothing about a failed delivery: the publish is
+ * answered with a message id before anything is delivered, and a delivery that
+ * fails after that is the subscription's problem. Neither does this. Swallowing
+ * the failure entirely would leave a queue mysteriously empty, so every failure
+ * is kept for inspection and anything other than a refusal is warned about
+ * once.
+ */
+export declare class SimSnsDeliveryFailures {
+    private readonly failures;
+    private readonly warned;
+    /**
+     * Every message this scope could not deliver, oldest first.
+     */
+    get all(): readonly SimSnsDeliveryFailure[];
+    /**
+     * Record a failed delivery, from what the fan-out knows about it.
+     */
+    record(properties: SimSnsDeliveryFailureProperties): void;
+    /**
+     * Warn about an endpoint that failed, once per endpoint and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    private warn;
+}
+//# sourceMappingURL=sim-sns-delivery-failures.d.ts.map

package/dist/service/sns/delivery/sim-sns-delivery-failures.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-failures.d.ts","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-failures.ts"],"names":[],"mappings":"AAEA;;GAEG;AACH,MAAM,WAAW,+BAA+B;IAC9C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED;;GAEG;AACH,qBAAa,qBAAqB;IAChC,SAAgB,QAAQ,EAAE,MAAM,CAAC;IACjC,SAAgB,eAAe,EAAE,MAAM,CAAC;IACxC,SAAgB,WAAW,EAAE,MAAM,CAAC;IACpC,SAAgB,SAAS,EAAE,MAAM,CAAC;IAClC,SAAgB,KAAK,EAAE,OAAO,CAAC;IAE/B,YAAY,UAAU,EAAE,+BAA+B,EAMtD;IAED;;OAEG;IACH,IAAI,UAAU,IAAI,OAAO,CAExB;IAED;;OAEG;IACH,IAAI,MAAM,IAAI,MAAM,CAInB;CACF;AAED;;;;;;;;;GASG;AACH,qBAAa,sBAAsB;IACjC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAA+B;IACxD,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAqB;IAE5C;;OAEG;IACH,IAAI,GAAG,IAAI,SAAS,qBAAqB,EAAE,CAE1C;IAED;;OAEG;IACH,MAAM,CAAC,UAAU,EAAE,+BAA+B,GAAG,IAAI,CAaxD;IAED;;;;;;OAMG;IACH,OAAO,CAAC,IAAI;CAeb"}

package/dist/service/sns/delivery/sim-sns-delivery-failures.js

@@ -0,0 +1,84 @@
+import { SimSnsDeliveryNotPermitted } from "../error/sim-sns-delivery.error.js";
+/**
+ * One message an endpoint did not take.
+ */
+export class SimSnsDeliveryFailure {
+    topicArn;
+    subscriptionArn;
+    endpointArn;
+    messageId;
+    error;
+    constructor(properties) {
+        this.topicArn = properties.topicArn;
+        this.subscriptionArn = properties.subscriptionArn;
+        this.endpointArn = properties.endpointArn;
+        this.messageId = properties.messageId;
+        this.error = properties.error;
+    }
+    /**
+     * Whether the endpoint refused the message rather than failing on it.
+     */
+    get wasRefused() {
+        return this.error instanceof SimSnsDeliveryNotPermitted;
+    }
+    /**
+     * What went wrong, in one line.
+     */
+    get reason() {
+        return this.error instanceof Error
+            ? this.error.message
+            : String(this.error);
+    }
+}
+/**
+ * What became of the messages a simulated SNS scope could not deliver.
+ *
+ * Real SNS tells the publisher nothing about a failed delivery: the publish is
+ * answered with a message id before anything is delivered, and a delivery that
+ * fails after that is the subscription's problem. Neither does this. Swallowing
+ * the failure entirely would leave a queue mysteriously empty, so every failure
+ * is kept for inspection and anything other than a refusal is warned about
+ * once.
+ */
+export class SimSnsDeliveryFailures {
+    failures = [];
+    warned = new Set();
+    /**
+     * Every message this scope could not deliver, oldest first.
+     */
+    get all() {
+        return this.failures;
+    }
+    /**
+     * Record a failed delivery, from what the fan-out knows about it.
+     */
+    record(properties) {
+        const failure = new SimSnsDeliveryFailure(properties);
+        this.failures.push(failure);
+        if (failure.wasRefused) {
+            // A refusal is a modelled outcome rather than a fault: the queue policy
+            // says no, which is what a test taking a permission away is checking
+            // for. It is recorded, not warned about.
+            return;
+        }
+        this.warn(failure);
+    }
+    /**
+     * Warn about an endpoint that failed, once per endpoint and cause.
+     *
+     * Warnings go to the console because that is where a test runner surfaces
+     * them next to the failing expectation they explain; the simulator has no
+     * logger of its own to route them through.
+     */
+    warn(failure) {
+        const key = `${failure.endpointArn}:${failure.reason}`;
+        if (this.warned.has(key)) {
+            return;
+        }
+        this.warned.add(key);
+        // eslint-disable-next-line no-console
+        console.warn(`Simulated SNS topic ${failure.topicArn} could not deliver to ` +
+            `${failure.endpointArn}: ${failure.reason}`);
+    }
+}
+//# sourceMappingURL=sim-sns-delivery-failures.js.map

package/dist/service/sns/delivery/sim-sns-delivery-failures.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sim-sns-delivery-failures.js","sourceRoot":"","sources":["../../../../src/service/sns/delivery/sim-sns-delivery-failures.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,0BAA0B,EAAE,MAAM,oCAAoC,CAAC;AAahF;;GAEG;AACH,MAAM,OAAO,qBAAqB;IAChB,QAAQ,CAAS;IACjB,eAAe,CAAS;IACxB,WAAW,CAAS;IACpB,SAAS,CAAS;IAClB,KAAK,CAAU;IAE/B,YAAY,UAA2C;QACrD,IAAI,CAAC,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACpC,IAAI,CAAC,eAAe,GAAG,UAAU,CAAC,eAAe,CAAC;QAClD,IAAI,CAAC,WAAW,GAAG,UAAU,CAAC,WAAW,CAAC;QAC1C,IAAI,CAAC,SAAS,GAAG,UAAU,CAAC,SAAS,CAAC;QACtC,IAAI,CAAC,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC;IAChC,CAAC;IAED;;OAEG;IACH,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,KAAK,YAAY,0BAA0B,CAAC;IAC1D,CAAC;IAED;;OAEG;IACH,IAAI,MAAM;QACR,OAAO,IAAI,CAAC,KAAK,YAAY,KAAK;YAChC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO;YACpB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;;;GASG;AACH,MAAM,OAAO,sBAAsB;IAChB,QAAQ,GAA4B,EAAE,CAAC;IACvC,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAE5C;;OAEG;IACH,IAAI,GAAG;QACL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;OAEG;IACH,MAAM,CAAC,UAA2C;QAChD,MAAM,OAAO,GAAG,IAAI,qBAAqB,CAAC,UAAU,CAAC,CAAC;QAEtD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAE5B,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;YACvB,wEAAwE;YACxE,qEAAqE;YACrE,yCAAyC;YACzC,OAAO;QACT,CAAC;QAED,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACrB,CAAC;IAED;;;;;;OAMG;IACK,IAAI,CAAC,OAA8B;QACzC,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QAEvD,IAAI,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YACzB,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAErB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,uBAAuB,OAAO,CAAC,QAAQ,wBAAwB;YAC7D,GAAG,OAAO,CAAC,WAAW,KAAK,OAAO,CAAC,MAAM,EAAE,CAC9C,CAAC;IACJ,CAAC;CACF"}